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1. INTRODUCTION 


A problem has always existed in basic computer science education in 
training students to take a problem and translate it into a working solution 
on a computer. This process can be broken down into three steps: 

a Create an algorithm 

Cae Make a flow chart of the algorithm 

ar Code the algorithm 
A major area of intellectual difficulty is the process of conceptualizing an 
algorithm in a form that can be easily translated into a flow chart. There 
has not been and perhaps never will be a rigorously prescribed way to approach 
this problem. 

The human mind performs these processes in a way yet unknown. What 
I will try to do is treat the human mind as a black box and perform the same 
operations by creating a system of logical cognitive models of the required 
operations in taking an algorithm and translating it into a form suitable for 
coding. I will then demonstrate these cognitive models by demonstrating a 
method of checking the logical construction of implementations of some algorithms 
by using these models as part of a system for automatic fault detection. My 
specific approach will be: 

i Develop a generalized heuristic procedure for generating conceptual 

models of algorithms; 
2a Develop these conceptual models for some common algorithms. 
oe Demonstrate step 1 and step 2 by using these models in a prepro- 
cessor written to perform automatic fault detection on implementa-— 


tions of these algorithms. 


2. MODEL GENERATING AND IMPLEMENTATION CHECKING PHILOSOPHY 


Decide which features are important and devise a technique for 


algorithm detection. 


EXE M Approach 


Separate the algorithm into a series of partitions that are each a 
logical operation and are easily physically separated. 
If the partitions are large and/or very complex then perform the 


separation operation again, and so on. 


2.2 Method 

Represent the algorithm as a Type 3 language represented by a series 
of productions. Describe the language using several levels of non-terminals - 
the lower the numerical level assigned to the non-terminal the more complex is 


the sublanguage the non--terminal represents. 


2.3 Implementation Analysis 
Define a function, plausibility, whose range is between O and 100, 


and whose initial value is 100. The plausibility will be an estimate of the 
likelihood that a specific implementation of an algorithm is an accurate 
mechanization of the algorithm in question. The plausibility is determined 
by two factors: 
1. The existence of certain features of the algorithm in the 
implementation in question, 
ee The physical location, precedence, of the various features 


in this implementation. 


The existence and precedence relations can both be discovered by analyzing the 
productions in the model, Each feature is assigned a step constant whose range 
is between 0.0 and 1.0. It is an estimate (heuristic) of the relative impor- 
tance of this feature in the algorithm model. The absence of this feature or 
its physical misplacement in the implementation shall suggest an error in the 
implementation. 

When checking the implementation, should such an error condition 
arise, the plausibility is reduced by multiplying it by the associated step 


constant. 


2.4 The Algorithm Checker (AC) 
The Algorithm Checker is a program written for the IBM 360/75 


computer in SNOBOL language. It implements the above techniques to perform 
analysis of the implementations of some specific algorithms, The input to AC 
is a student program, coded as a FORTRAN subroutine intended to mechanize an 
algorithm which AC has been written to check. If AC is told which algorithm 
to check for AC will be able to: 
oe Estimate the plausibility that the algorithm is being correctly 
implemented or not, 


pe Recognize and comment on logical errors in the input program. 


3. EXAMPLE - METHOD OF FALSE POSITION 


3.1 Description of the Algorithm 


Method of False Position 
One approach to the solution of non-linear equations will be to use 
linear inverse interpolation to derive methods of the form: 


he 


Oct a F(x, Xa tee Sy 


One such method is the method of false position. Suppose we can find two 


points x, and x, such that he, eee The chord joining y, and y, inter- 


A 
sects the x axis at a point x,. Then chosing x, and x, (either x, OF x, ) such 
that f(x, )*£(x, ) O. We repeat the same procedure to obtain a new xy and so on. 


Terminate this process when fy is sufficiently small. 


3.2 Create the Model 


A. The method of false position algorithm can be broken down into steps: 


1. Initialization 
An Loop 
3. Terminate 


These steps should occur in the above order both logically and 
physically with a high probability and the algorithm can be represented by the 


following flow chart: 


| INITIALIZE 


TERMINATE 


( STOP ) 


ss 


—_——— ee ee ee ea ee 


a a 


Or it can be described by this production: 
< false position> ::= < initialize>< loop>< terminate> 
Assign level zero to the non-terminal on the left hand side and assign level 
one to the three non-terminals on the right hand side. 
From this production we can immediately derive a precedence relation- 
ship where the three steps should appear in this specific order with a very 


high liklihood. 


Precedence Table 


-1 A must precede B 


OQ don't care 


Initialize 


7i- Bi must precede A 


Terminate 


B. The initialization step should perform these operations: 
i. The definition of the non-linear function, F. If this operation 
is present, in FORTRAN, it would most likely be a function state- 


ment. 


2« Make first two guesses at the root of F, x and Xp 


a Calculate the values of F at Xn and Xp» fy and fa 


The initialize step could be represented by the following flow chart; 


DEFINE (A) 
FUNCTION 


MAKE INITIAL 
GUESS X, (B) 


MAKE INITIAL 
GUESS x, (Cc) 


£(X,) (D) 


h Reger GE 
E = £(X,) (B) | 


However the possible orders of operation for the various operations in the 


initialization step are not unique; there could be several different flow 


charts for the initialization step. The initialization step can be represented 


by just one set of productions: 


< initialize> ::=< define function> < initialize Ky? 


(< initialize X,> K calculate f > < calculate eee | 


( < calculate es calculate f,> ys) 


K calculate sea initialize x < calculate iw 


This production is unique. The left-hand side of the production is level one, 


from before, and the non-terminals on the right-hand side are assigned level 


two. From this production we can derive the following precedence relations: 


PRECEDENCE TABLE 


fr. * Bust precede X 


@) don't care 


-1 X must precede Y 


* 


note that step A precedes steps B and C strictly due to FORTRAN 


syntax requirements. 


C. An iterative process can be described by a generalized loop step. 


This generalized loop step can be represented by the following flow chart. 


Step A: 
perform some 
operations 


: Step B; 
are the termination 
conditions satisfied 


no 


Step C; 
perform some 
operations 


Note that either step A or step C may be null. However for the méthod of 


false position both steps should exist. 


The loop step should perform these operations: 


ig 


De 


Calculate the next guess at the root of F, xy: 
Calculate the value of the function F, at xy fy 


Check the value of f.., (or some other function of Xy) if it is 


WV? 
small enough, then exit the loop. 


Decide which old value of X to replace for use in the calcula- 


tions in the next pass through the loop. Then replace either 


'X. or X, and the associated f, or f. with Xy and ty respectively. 


A B A B 


Substituting into the generalized loop step above, the loop step 


of the method of false position can be represented by the following flow chart: 


From initialize step 
4 


Perform inyerse 
interpolation to 


find value of new 


N 


Using yalue of 
Calculate new 
yalue of ty 


Are the termination 
conditions satisfied? 
mig abs(f,) small enough? ) 


yes 


To Termin= 


He ate Step 


Replace old value of 


X and ty with xy and fy 


Each operation in this flow chart can be expected to be found in the logical 
position corresponding to its position in the flow chart with a high probability. 
The physical position os these operations should also be similar to the flow 
chart with a somewhat lower probability. The operations that must be performed 
to satisfy the requirements of the box are physically unique; there is more 
than one way to perform any operation. 
The loop step of the method of false position algorithm can be 
represented by the following production: 


< loop> ::= < calculate new Xy? calculate ty from 2 


\pranch if fy small enough> <test signed ty replace X and f> 


From the above production we can derive a precedence relationship for all 
elements of the loop step. In this case the flow chart above is the only 
probable way to order the steps. 

D. The termination step of the algorithm is not well defined. The only 
requirements on it are exclusively syntactic. The termination step must be 


ended by a RETURN statement followed by an END statement. 
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4, THE ALGORITHM CHECKER 


4.1 General Physical Description 
The Algorithm Checker program will be coded in IBM/360 SNOBOL IV. 


It consists of a supervisor program which calls various subprograms written 
to check for specific features. 

AC will search for the specific features of an algorithm in a 
sequence of operations derived from the productions in the algorithm model. 
AC will first separate the major program sections (level 1 non-terminals) 
and then search these major program sections for subsections specified by 
level 2 non-terminals, and so on. While this is being performed AC will also 
be continuously updating the plausibility of this implementation each time 


an error condition occurs. 


Ee) Implementation Method of False Positions 
A. Level 1 


The first thing AC must do is separate the input program into the 

three distinct steps specified by the production; 
< false mec aane ::= < initialize>< loop>< terminate> 

This step breakdown operation can most easily be performed by first lack 
for distinctive physical code structures in the various steps. The most dis- 
tinctive and easiest-to-detect feature is the structure of an iterative opera- 
tion. In the method of false position there is only one iterative operation 
expected, the loop step. 

The loop step is found by scanning the input program for one of these 


patterns: 


abet: 


Pattern 1 #* 


IF(A < velational operator> B)GOTOn 


Pattern 2 


There are other more complex ways of coding iterative operations but 


for now I will assume that only one of these more simple patterns has been 


Should a pattern match be successfully performed, it will be assumed 


that all code physically preceding the loop step is the initialize step and 


that all code physically following the loop step is the terminate step. 


If the loop step cannot be successfully isolated it becomes extremely 


difficult for AC to proceed beyond this point and obtain any meaningful results. 


So, if the loop step cannot be detected and isolated, AC will reduce its 


plausibility estimate to a very low value and will terminate processing this 


implementation. 


* < relational operator> ::= SED aaun dale or les » GE 
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3. Level 2 - Initialize 


The initialize step was defined by the productions: 


<initialize> ::= < define function> < initialize X? 


(< initialize X,? (< calculate f >< calculate f,? Va 


(< calculate f,> < calculate f,> )) | 


(< calculate £2. ¢ initialize X,? < calculate fn? ) 


The left-hand side of the production is a level 2 non-terminal and the 
right-hand side is composed of level 3 non-terminals. The level 3 non- 
terminals, in this case, will all reduce to terminals. The terminals for 
this language are all equivalent to one or more FORTRAN statements. 


< define function> ::={ var, (var,) = exp(var,,)} is 


one such level 3 production. var, is the name of the function of var, 


is the name of the functions dummy variable. Similarly 


< initialize X,> t= var, = exp} | {var = const} 
< initialize X,> t= fvar), = exp} | { var, = const} 
< calculate f,> ii= fvar, = var, (var,)] 
< ag - 

calculate f,> :: var var, (var) )} 


3 


arithmetic expression, exp(var_) is any valid FORTRAN arithmetic expression 


oe oa We . . ; P ; R! 
Where var, is Kas var) is Xs var, is Pas var¢ is Xo exp is any valid FORTRAN 


which contains var» and const is. any valid FORTRAN constant. All complete 
FORTRAN statements are enclosed in braces. 
We scan the code searching for the patterns specified by the above 


productions. If we have pattern matches we assign the names of the variables 


MS) 


in the code to the variables Xn» Xp» re ft,» respectively. If any of the pat- 
tern matches fail, or the operations are out of correct order, the plausibility 
is reduced by multiplying it by the appropriate step constant. 

If DELTA, the loop termination control value (see next section), is 
initialized in the initialize step. There are some additional complications 
caused by certain ambiguities. We must diverge from a completely systematic 
approach and use some additional heuristics and first determine the additional 
value of DELTA. 

C. bevel 2 — Loop 

The logical expression in the IF-GOTO, {IF (logical expression) GOTOn}, 
statement which controls loop termination should reduce to the form: 
(A.LT.DELTA) where A is a positive valued expression and DELTA is a positive 
constant such that when the expression is true the loop step is exited. However, 
there are several equivalent forms of this expression which are not immediately 


identifiable. For the expression A.GT.B. assuming that A and B are variables 


of date type REAL. Here is a list of some equivalent expressions: 


Ae 

A.G 

B.L 

B.LE.A 

«NOT, (8,GT.A) 

.NOT. (B.GE.A) 
) 
) 


T.B 
E.B 
diaeee 


NOT. (A.LT.B 
NOT. (A.LELB 
A-B.GT.O 
A-B.GE.O 
B-A.LT.O 
B-A.LE.O 


I will consider the relational operations .LT. equivalent to .LE.., and .GT. 


equivalent to .GE. because for real numbers of finite length due to computer 
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truncation error, the relational operators .LT. and .LE., and .GT. and .GE., 


are indistinguishable. 


The loop step can be represented by the following production: 


< loop> 


::=< calculate new Xs calculate f, from xy? 


N 


< branch on condition satisfied>< replace old X and associated f> 


The level 3 non-terminals on the right-hand side of the above reduce to: 


< calculate new Xy» calculate ty from xy ::=< calculate Xy? 
< calculate ty 
EAs ME es Sa 3 
< calculate X)> ::= {var = awe: ee? } 
1G tae ih 
A B 
where vara is Xy and Xn» Xp fae and fs were defined in the initialization 
Step. 
< branch on condition satisfied> ::={IF (logical expression) GOTOn} 
« or = 
calculate f,> :: ah nS) 


<replace old X and associated f> ::= 


{ GOTOm} < replace B> 


< test> 

< replace a> ::= ({X, = 
ey = 

< replace b> ::= coe = 
if, 


If the: Loop control LF 


< test>< replace a> 


::=< IF (logical expression) GOTOn} 


ey al 
Cw e De) 
2 Oe a 2) 
fy) { X, = X)) : 


- GOTO statement contains a logical expression 


that does not reduce to the form of A < relational operator> B it is not accept 


able and is rejected. 
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Within the loop the termination value DELTA should be a constant. 
We select it from the positional and structural relationships defined in 
the productions. If logical expression is of the form { X.LT.DELTA} where 
DELTA is a constant, then we assume we have found the value of DELTA. 

If DELTA is a variable we must check the initialize step for an 
expression of the form { var, = const.}. Where var, is DELTA then the con- 
stant is the value of DELTA. 

If we cannot find the value of DELTA we assume DELTA undefined, and 
we reduce the plausibility by an appropriate amount. 

Next we will check the calculation of xy by performing a match of 
statements to see if any are mathematically equivalent to the production using 
the proper variable names. Then check to see if its followed by the calcula- 
tion of tyr 

Next check to see if the replacement of old X and f is properly per- 
formed by checking for pattern matches with the productions. 


Again, if there are failures in the pattern matches or order of 


operations we again reduce the plausibility by an appropriate step constant. 
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5. CONCLUSION 


The Algorithm Checker is operational for checking implementations 


of the method of false position algorithm implementations. It has proven to 


be capable of parsing the implementation into specific steps, isolating specifi 
variables, and making a reasonable guess as to whether a given implementation 


will in fact perform a false position root finding function. 
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APPENDIX 1 


Implementation Restrictions - method of false position 
Algorithm Restrictions 
A. Assume termination within a reasonable number of iterations; 
therefore there is no need to count the number of steps. 


Bs Assume that the first guess of X, and X, will give values of f 


A B A 


* 
and = such that o, ee Os 


oe Starting values of X, and X, will not yield zero values of f 


A B A 


of f,: 

D. The termination conditions are reasonable. 

E. The termination value, DELTA, is a constant defined within the 
input program. 

AC Input Restrictions 

Student programs should observe these constraints; 

A. The input program must be coded in syntacically legal IBM 360 
FORTRAN IV. 

B. The overall structure of program is that of a FORTRAN subroutine. 

C. All functions will be defined by function statements. 

De All arrays are dimensioned. 

E. The arithmetic IF is not allowed. 

Output from AC 

The output from AC will be a printed copy of the input program (above) 

and comments for AC as to: 


A. Program variable names and their relation to the algorithm. 


B. Comments as to coding accuracy. 
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C. AC's estimate of the plausibility that the correctly implemen 
Da Recommended corrections for the input program. 
Notation Conventions 


Xqo Xs The two values of X used to calculate the next esti 


root. 
Xy The new estimate of the root. 
£ The function whose root we're interested in. 


£(X) Calculate the function at X._ 


rte The values of the function at X, and X,. 
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APPENDIX 2 


Algorithm Checker Processing Some Test Implementations 
of the Method of False Position 


‘ 


Cita 


hl eh bei 
~~ ; 
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